Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: jFFiQZEbwy5FfyfLTY1YTBLVxqlVB2wqDPr+yQWMlFc=
Subject key identifier: D4:FE:5C:77:76:BA:D7:B2:2A:39:75:82:51:77:CF:44:41:6F:ED:1A
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 0198819DBB28E67B7CF80DE6F66CF6B9AF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 1337
Signing time: Wed 06 Aug 2025 23:00:54 +0000
Manifest this update: Wed 06 Aug 2025 23:00:54 +0000
Manifest next update: Thu 07 Aug 2025 23:00:54 +0000
Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: ikCsBPPUDd2beXiQ6vY7PwVUm0se1bx3fxPm+lHpFQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:bb:28:e6:7b:7c:f8:0d:e6:f6:6c:f6:b9:af:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Aug 6 23:00:54 2025 GMT
Not After : Aug 7 23:00:54 2025 GMT
Subject: CN=d4fe5c7776bad7b22a3975825177cf44416fed1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:54:3a:94:0a:3d:41:11:97:23:6c:5c:9e:
ff:03:8e:3b:bb:63:a0:cd:6a:19:07:e7:23:b9:cb:
82:18:bd:48:21:99:36:1e:2c:58:25:bd:10:ab:59:
00:6b:9c:b5:aa:f2:52:cc:8f:48:8f:a4:5c:07:95:
94:e4:39:b4:8f:41:6d:14:98:58:0d:55:fa:38:86:
37:d9:46:a2:01:43:79:35:f7:5e:e8:92:2f:23:c0:
53:47:ac:14:b4:4a:63:e6:b6:bc:88:a2:89:e5:e8:
68:8d:ab:bc:e0:ec:77:5e:8d:aa:8e:a7:fe:db:f4:
e7:50:fd:5d:28:88:56:0a:11:39:c9:df:41:a1:bf:
29:2b:b0:5f:73:16:df:90:d5:15:eb:60:51:96:ce:
59:9a:28:4a:da:55:95:d3:c9:8d:a0:09:a2:77:f6:
d5:9c:69:13:45:b7:53:10:56:e0:f4:9c:f8:75:74:
7d:29:39:6f:11:8f:ae:9b:f4:ae:18:77:3c:b8:67:
ec:b7:72:4a:d5:82:e7:b6:d5:e7:f1:d9:9b:b4:68:
d2:5c:c1:09:b1:9b:34:4c:f8:ab:0b:80:87:2f:02:
3a:f3:41:e0:22:19:0e:4e:e0:d0:90:db:01:73:c2:
9f:31:8f:8c:41:71:bf:21:d8:1a:c0:a5:cb:65:ed:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FE:5C:77:76:BA:D7:B2:2A:39:75:82:51:77:CF:44:41:6F:ED:1A
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d7:30:9c:05:12:a4:ad:11:4a:8a:eb:2e:b7:01:10:45:9c:
8b:00:1b:fb:3a:61:07:9e:b0:0d:bd:47:5b:17:f7:96:a4:90:
d7:66:a8:ce:4d:d9:5c:dd:e1:7a:06:3a:4e:68:60:42:6f:d4:
3b:2a:43:54:5e:c3:b5:ef:77:ce:ef:36:ef:fa:70:62:bc:08:
2d:83:5e:e6:14:c5:75:3b:76:bb:70:5f:06:df:3c:5d:ff:bb:
9f:3a:0d:bf:ed:69:94:60:78:9b:6c:d1:3e:ae:fc:43:00:3d:
b2:14:68:5d:76:3c:89:d4:01:45:7c:ed:f6:6a:ff:e4:22:38:
4d:1b:eb:63:88:86:a4:24:de:4f:5c:38:e8:2b:08:e4:9f:bf:
95:e1:4e:22:dc:1e:10:20:63:d0:19:e8:7c:08:ef:aa:f4:74:
23:17:60:24:5c:f5:34:1b:c4:67:2e:29:5e:fc:05:d0:18:9d:
fd:98:b8:49:32:1f:5a:db:42:00:0a:ad:38:4f:d0:88:50:e0:
2b:c1:98:4d:8d:4d:37:96:89:e8:54:63:eb:32:ab:b8:bc:96:
9d:16:8c:b8:95:00:de:bf:a1:d7:ef:c7:52:5e:4f:47:2c:e5:
c5:5a:26:16:51:ef:ed:ee:42:43:6c:90:8a:11:cb:2d:94:2b:
e8:74:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:51:21 2025 by rpki-client